Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
File: oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft (raw, json)
Hash identifier: 9JdU9crjvnsfE17Uzze3UxQP3grH8RScNEqWzxWDWJ0=
Subject key identifier: AC:45:CE:FD:B5:82:3E:38:F2:CE:0F:F3:23:9A:D7:4E:AF:8B:A5:45
Authority key identifier: A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A
Certificate issuer: /CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a
Certificate serial: 0198D65FF306A12D56138DE118A3AB41A18E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:01:08 +0000
Manifest this update: Sat 23 Aug 2025 10:01:08 +0000
Manifest next update: Sun 24 Aug 2025 10:01:08 +0000
Files and hashes: 1: oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl (hash: 2xuXvzdRBZ0ToMK7IFG14ARu9/NFOnkOIzzlyFGWL2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:f3:06:a1:2d:56:13:8d:e1:18:a3:ab:41:a1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a
Validity
Not Before: Aug 23 10:01:08 2025 GMT
Not After : Aug 24 10:01:08 2025 GMT
Subject: CN=ac45cefdb5823e38f2ce0ff3239ad74eaf8ba545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d5:58:58:aa:22:0e:48:ab:9f:1f:84:45:f3:
d0:d3:83:6d:fb:14:57:ba:0e:7d:30:88:c9:bc:00:
c8:43:cd:50:aa:c4:29:dc:c3:5a:26:75:d7:42:71:
53:c6:52:22:ba:d7:89:51:31:66:35:d2:25:57:1a:
cd:03:a0:a5:9b:ff:9c:78:b8:7b:2b:78:82:d4:a0:
d7:31:7b:2f:24:e9:c5:4d:9a:5b:d1:2f:7f:3d:1e:
dc:88:07:6b:55:41:a9:0f:16:b7:9b:63:5a:4f:ca:
88:7b:45:15:76:22:f0:4f:c6:71:bf:c8:01:80:e4:
3b:50:6d:1f:40:41:bb:a2:76:3b:33:15:d2:c4:86:
ba:1a:b3:15:c8:17:8f:e7:66:f5:d2:fd:2f:bb:ae:
f1:af:5e:ce:e5:61:07:61:b3:31:58:fc:d7:37:9f:
9c:ea:c7:e4:02:02:8a:5d:c8:44:fe:1b:ea:ab:cd:
ae:33:73:01:ee:1f:f2:d6:de:75:52:5a:07:2e:38:
1d:0e:ee:c6:d3:9d:a5:de:6b:61:43:1c:b8:61:0a:
f0:56:15:60:01:a5:a2:df:92:6f:7c:ad:ef:3f:c0:
39:19:95:3e:2c:fa:86:58:ec:b2:19:09:71:8d:3b:
e9:6a:15:49:9e:04:6b:15:5b:c1:8d:78:76:39:67:
1a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:45:CE:FD:B5:82:3E:38:F2:CE:0F:F3:23:9A:D7:4E:AF:8B:A5:45
X509v3 Authority Key Identifier:
keyid:A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:93:c2:04:ba:6c:13:bc:45:c0:d5:ea:13:1b:b0:21:fa:09:
95:35:4e:fc:46:72:41:ea:a5:cb:75:6e:cf:c9:d0:58:21:2f:
54:44:76:2d:13:5e:5b:5c:30:bf:98:ed:8b:39:73:3c:43:60:
3e:88:cd:2c:3a:a6:f8:4f:72:9c:da:35:fc:d0:b7:fe:ff:90:
02:3f:c6:62:ae:64:58:75:fa:cf:9d:2e:4e:29:77:dd:67:5e:
07:37:06:07:77:05:f1:ae:59:30:99:c6:63:9b:bf:7e:cb:a8:
26:3d:8f:78:b5:0d:81:91:02:e0:e5:9c:52:4f:70:6c:38:fd:
21:96:a5:2a:95:23:9d:56:75:b7:d2:87:4a:39:d3:1b:3c:8d:
14:b8:47:a0:e3:ce:9a:66:8e:fa:38:24:86:6a:fd:ec:28:97:
19:c4:0b:cd:39:a0:08:66:ac:f9:f2:b9:9b:57:41:6f:6a:42:
ed:48:79:aa:3c:e2:b0:cc:94:d5:28:1b:e7:66:70:7f:39:3b:
ee:a2:f8:96:7c:b5:34:ea:06:eb:52:dd:8f:1a:75:ef:b7:e0:
70:61:5a:15:75:0f:e3:23:76:bb:f4:e2:c5:3b:e5:6c:72:e1:
51:2e:c0:dd:d1:78:dd:70:58:a6:3d:9e:0a:5d:c1:9e:91:b0:
73:c9:00:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:33:53 2025 by rpki-client